You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Marcin Mirosław <ma...@mejor.pl> on 2013/10/18 15:07:47 UTC
False positive in FB_CIALIS_LEO3 rule
Hi!
I'm not sure if false positives should be reported here or in bugzilla.
If I choosen wrong place please let me know.
Innocent phrase in Polish language "brakuje Ci aliasów"[1] triggers
rules mentioned above.
[1] - it means: "[...] you are missing aliases [...]"
Regards,
Marcin
Re: False positive in FB_CIALIS_LEO3 rule
Posted by Axb <ax...@gmail.com>.
On 10/18/2013 03:34 PM, Marcin Mirosław wrote:
> W dniu 18.10.2013 15:23, Axb pisze:
>> On 10/18/2013 03:07 PM, Marcin Mirosław wrote:
>>> Hi!
>>> I'm not sure if false positives should be reported here or in bugzilla.
>>> If I choosen wrong place please let me know.
>>> Innocent phrase in Polish language "brakuje Ci aliasów"[1] triggers
>>> rules mentioned above.
>>>
>>> [1] - it means: "[...] you are missing aliases [...]"
>>> Regards,
>>> Marcin
>>>
>>
>> Please post the full SA report you go on this msg.
>
> Is this what you are asking for?
>
> Content analysis details: (7.7 points, 5.0 required)
>
> pts rule name description
> ---- ----------------------
> --------------------------------------------------
> 3.1 FB_CIALIS_LEO3 BODY: Uses a mis-spelled version of cialis.
> 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
> above 50%
> [cf: 100]
> 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
> [cf: 100]
> 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
> 0.1 MISSING_MID Missing Message-Id: header
>
> Very similar email was sended to many recipients on one mail server this
> is why email was so high scored by razor rules.
Razor's confidence is not based on a few msgs to *your* server
I'll look into why FB_CIALIS_LEO3 is being forced such a high score...
Seeems Rule QA wouldn't have published it
0.0064 0.0070 0.478 0.47 1.69 FB_CIALIS_LEO3
h2h
Re: False positive in FB_CIALIS_LEO3 rule
Posted by Marcin Mirosław <ma...@mejor.pl>.
W dniu 18.10.2013 15:23, Axb pisze:
> On 10/18/2013 03:07 PM, Marcin Mirosław wrote:
>> Hi!
>> I'm not sure if false positives should be reported here or in bugzilla.
>> If I choosen wrong place please let me know.
>> Innocent phrase in Polish language "brakuje Ci aliasów"[1] triggers
>> rules mentioned above.
>>
>> [1] - it means: "[...] you are missing aliases [...]"
>> Regards,
>> Marcin
>>
>
> Please post the full SA report you go on this msg.
Is this what you are asking for?
Content analysis details: (7.7 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
3.1 FB_CIALIS_LEO3 BODY: Uses a mis-spelled version of cialis.
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.1 MISSING_MID Missing Message-Id: header
Very similar email was sended to many recipients on one mail server this
is why email was so high scored by razor rules.
Thanks,
Marcin
Re: False positive in FB_CIALIS_LEO3 rule
Posted by Axb <ax...@gmail.com>.
On 10/18/2013 03:07 PM, Marcin Mirosław wrote:
> Hi!
> I'm not sure if false positives should be reported here or in bugzilla.
> If I choosen wrong place please let me know.
> Innocent phrase in Polish language "brakuje Ci aliasów"[1] triggers
> rules mentioned above.
>
> [1] - it means: "[...] you are missing aliases [...]"
> Regards,
> Marcin
>
Please post the full SA report you go on this msg.